$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa File: cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa (raw, json) Hash identifier: aMVNmfLN3xyDswuxGjNL+v9107eQV0WezfjvSk0vsRY= Subject key identifier: 63:FE:BF:87:24:15:14:70:0B:90:41:EC:26:B5:DC:FB:B3:63:D1:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FC7C07CE12E234A568A58564C9D6E7BBC197C23 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa Signing time: Sat 10 May 2025 00:00:10 +0000 ROA not before: Sat 10 May 2025 00:00:10 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.148.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c7:c0:7c:e1:2e:23:4a:56:8a:58:56:4c:9d:6e:7b:bc:19:7c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:10 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=463e4aceefebb3b49371c7a9bb636c954248ce946d9ca28fcf33163de922b7be, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:bb:cb:06:88:bc:1f:42:ac:1f:f4:92:a9: 47:4f:9e:3f:cb:2f:54:52:e7:f0:87:f9:18:69:9a: 9c:f3:41:bf:7a:d2:df:32:69:9d:d1:74:04:e0:24: b3:a7:cb:15:61:d6:5c:4c:56:65:7f:f0:41:b1:2f: 1d:0b:12:84:e0:4d:34:c6:e0:36:0d:7e:19:0f:8f: 65:71:b9:3a:bc:15:20:dd:f1:a3:fe:23:ae:ac:15: ef:fc:1a:df:77:1f:b7:91:3b:56:69:19:f7:04:5f: 5a:90:46:b1:54:4e:8c:28:d6:f0:99:06:0d:8b:b4: cf:09:80:a4:bc:a5:ed:fa:9c:9d:b7:d5:3a:c2:37: 05:d3:4e:1f:d9:14:4b:14:55:30:0c:aa:ad:1b:74: a8:73:69:f7:0b:04:36:99:60:d8:79:ac:f6:f3:ea: 65:b0:4d:c6:b2:98:ff:2f:46:6f:57:dd:f0:8f:eb: e4:fe:d3:7d:d8:c7:65:73:c0:26:00:c2:6c:4e:1f: b4:cf:90:bb:51:4e:bd:43:07:5b:a3:b9:7a:54:96: 47:1f:f5:56:5b:10:4d:e0:d3:a8:d8:f4:31:09:6d: 46:c3:ec:db:16:96:d2:7d:04:67:67:72:40:de:22: 97:ba:5e:71:75:b1:d2:1b:13:3a:9f:09:42:2b:99: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:BF:87:24:15:14:70:0B:90:41:EC:26:B5:DC:FB:B3:63:D1:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0db16b-d3e7-4d1b-8420-d0aa84f993b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.148.0.0/17 Signature Algorithm: sha256WithRSAEncryption 08:72:af:b2:6f:32:35:77:2c:60:75:40:44:82:c7:89:37:33: 35:8a:0f:e8:83:9c:21:0c:93:76:c8:14:7c:48:43:ac:6e:09: 43:63:c1:1c:40:b2:98:8f:8d:b5:b2:31:cf:0a:64:54:4f:25: 99:e1:50:67:72:a8:eb:f0:d3:31:5b:31:83:51:46:42:ce:2d: 10:ab:a9:0e:2f:49:6a:0e:ea:d5:5d:5f:77:ed:85:8d:7f:46: af:fe:9c:b0:f7:42:dd:8f:ac:68:33:cc:5d:9d:f7:a1:81:4a: 8a:5f:bf:14:02:54:e4:f3:5c:23:b3:29:96:b2:8d:52:ab:1e: bd:8c:d9:6e:75:87:a5:3d:00:7c:f8:2c:02:66:dd:b9:8c:b7: 47:fe:40:5c:6a:d7:29:f0:47:ba:19:a8:72:c6:52:78:c5:a7: 94:76:9c:83:2e:1d:1f:84:96:53:00:df:d0:dc:a0:6f:16:4d: 10:28:d1:f4:2d:d5:51:8e:5c:26:28:4a:c7:98:b8:84:62:78: 8b:81:b8:3f:0f:44:3b:3c:b2:2a:a7:ad:8b:23:7a:9d:fd:cf: fb:41:3a:8c:ba:b6:f4:ad:f7:11:f9:7d:6e:2f:1c:b0:b3:88: c0:42:21:d3:11:b9:d4:78:0e:52:04:51:76:3f:aa:c0:50:79: 8c:f7:6d:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf8fAfOEuI0pWilhWTJ1ue7wZfCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAwMDEwWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjNlNGFjZWVmZWJiM2I0OTM3MWM3YTliYjYzNmM5NTQy NDhjZTk0NmQ5Y2EyOGZjZjMzMTYzZGU5MjJiN2JlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvIrvLBoi8H0KsH/SSqUdPnj/LL1RS5/CH+RhpmpzzQb96 0t8yaZ3RdATgJLOnyxVh1lxMVmV/8EGxLx0LEoTgTTTG4DYNfhkPj2VxuTq8FSDd 8aP+I66sFe/8Gt93H7eRO1ZpGfcEX1qQRrFUTowo1vCZBg2LtM8JgKS8pe36nJ23 1TrCNwXTTh/ZFEsUVTAMqq0bdKhzafcLBDaZYNh5rPbz6mWwTcaymP8vRm9X3fCP 6+T+033Yx2VzwCYAwmxOH7TPkLtRTr1DB1ujuXpUlkcf9VZbEE3g06jY9DEJbUbD 7NsWltJ9BGdnckDeIpe6XnF1sdIbEzqfCUIrmVNdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY/6/hyQVFHALkEHsJrXc+7Nj0bUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiMGRiMTZiLWQzZTctNGQxYi04NDIwLWQwYWE4NGY5OTNiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdolAAwDQYJKoZIhvcNAQELBQADggEBAAhyr7JvMjV3LGB1QESCx4k3MzWK D+iDnCEMk3bIFHxIQ6xuCUNjwRxAspiPjbWyMc8KZFRPJZnhUGdyqOvw0zFbMYNR RkLOLRCrqQ4vSWoO6tVdX3fthY1/Rq/+nLD3Qt2PrGgzzF2d96GBSopfvxQCVOTz XCOzKZayjVKrHr2M2W51h6U9AHz4LAJm3bmMt0f+QFxq1ynwR7oZqHLGUnjFp5R2 nIMuHR+EllMA39DcoG8WTRAo0fQt1VGOXCYoSseYuIRieIuBuD8PRDs8siqnrYsj ep39z/tBOoy6tvSt9xH5fW4vHLCziMBCIdMRudR4DlIEUXY/qsBQeYz3bcY= -----END CERTIFICATE-----Generated at Sun Jun 1 04:24:11 2025 by rpki-client